Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
File:                     vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json)
Hash identifier:          zh+jcoKZo9+Yzt20JVxNKMaplFVsCrK7sJWgI9m0VCk=
Subject key identifier:   B7:96:9B:BB:84:0D:E7:92:84:CE:41:A7:0E:75:92:EE:56:1B:94:17
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Certificate issuer:       /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial:       0194BCE06E13C67B18B6107C8CFFD6ADB55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:12 +0000
Files and hashes:         1: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (hash: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=)
                          2: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (hash: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=)
                          3: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (hash: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=)
                          4: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: yxLbH0ZU+SwUyBvJB+ez3plQzGzWZitWWQw8OXzfQ/4=)
                          5: vdFR4y9F44FSjYAGCMTNGAkn55s.roa (hash: kapPC5BZzOsMFj/r/PWqmKyQ2wL4stabpvweUd2gaq0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:6e:13:c6:7b:18:b6:10:7c:8c:ff:d6:ad:b5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
        Validity
            Not Before: Jan 31 15:00:12 2025 GMT
            Not After : Feb  1 15:00:12 2025 GMT
        Subject: CN=b7969bbb840de79284ce41a70e7592ee561b9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:d4:3d:30:78:6b:fb:6f:84:ab:1d:f9:15:
                    ad:d8:03:fb:d3:f2:d2:f6:69:71:ee:e2:94:95:e5:
                    da:04:de:6f:d9:04:f7:74:3a:7d:31:72:6c:77:85:
                    94:e2:24:40:20:d9:0a:9f:f1:9e:df:0a:f2:c3:7c:
                    cc:b4:5d:be:58:08:9e:33:00:90:07:8b:41:3d:77:
                    4c:d4:5d:22:09:c6:9f:e4:a9:92:52:5a:b6:6d:29:
                    7a:38:77:c7:0f:7e:4a:68:16:6c:de:7b:17:17:c3:
                    bf:5a:e4:0f:22:c5:90:d2:a3:2b:c0:3d:7b:0e:fa:
                    ee:db:b7:8a:56:4d:91:cf:ca:19:28:bb:6e:d8:e5:
                    f7:f6:2b:0e:ab:79:02:df:bb:43:74:65:07:79:d4:
                    23:37:d2:b9:29:15:1c:16:23:42:51:08:5a:83:a2:
                    60:db:e8:d2:7b:32:f5:92:ba:95:a7:c5:42:70:02:
                    4f:34:b2:0a:06:4c:8a:20:e6:36:05:3c:7f:5f:bd:
                    6f:1f:ef:10:c0:b2:93:40:f9:2e:26:0c:6b:5e:c7:
                    b2:ff:6f:f5:c6:e6:32:42:4c:65:8e:a2:42:90:18:
                    c5:ca:89:58:4f:5f:c6:c2:49:0c:98:a2:23:48:b7:
                    85:a6:14:46:16:ce:58:17:ec:f2:d4:7d:aa:23:06:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:96:9B:BB:84:0D:E7:92:84:CE:41:A7:0E:75:92:EE:56:1B:94:17
            X509v3 Authority Key Identifier:
                keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:44:93:00:4a:5a:1e:63:be:36:0c:79:79:86:1e:32:6e:97:
         cb:79:ce:d0:dd:bb:91:b4:73:4c:60:fd:a5:76:c6:0d:c3:47:
         eb:f7:7c:63:de:0f:38:1c:43:6a:80:4d:3f:e3:b0:0c:f8:1f:
         b3:3f:fe:89:97:c7:8b:ff:24:60:1d:e7:5b:a4:71:92:bf:8f:
         cc:1e:a8:e6:58:56:22:ee:1d:71:b7:11:3c:ab:9b:77:f0:0b:
         fa:96:0f:12:e4:79:11:2a:53:eb:8b:ab:b8:21:1c:f7:5a:c4:
         47:fc:f7:7f:88:6e:dc:dc:87:02:7f:86:a0:41:f7:f7:18:87:
         ad:97:48:f4:30:e6:e0:87:ff:8f:a3:fb:8f:6d:33:4a:1b:76:
         05:14:a5:ef:57:b7:cf:ec:77:f5:c7:5f:15:d9:05:f0:51:a6:
         6e:ff:a2:03:b3:b9:89:25:13:5e:a7:fe:9e:3a:2f:b0:50:25:
         af:75:46:4b:78:28:be:cb:de:c4:40:e8:4d:52:e3:5c:e8:56:
         b1:72:46:36:70:ac:07:db:1d:b2:20:4b:4b:a0:69:62:fc:8c:
         3d:f7:c5:d3:d1:ff:a6:a6:42:c1:12:11:40:61:b7:89:53:28:
         47:f3:5a:9f:49:46:ae:56:36:04:8b:f0:27:76:e0:3c:db:ca:
         c6:47:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----